Skip to content
skopnix
Section C · The archive · Dispatch
← The archive

exploit · Fri 07 Aug 2026 · 20:08 UTC

Metabase customers staying silent about the breach

Filed UTCSource RDT ↗

This start of the week Metabase disclosed that its Cloud service was hit through a 0 day which can give an attacker admin access and potentially expose connected database credentials and the data behind them. Metabase is used across a pretty interesting group of fintech and crypto companies too like Revolut, Privy (Stripe company), Yellow Card etc. But what is shocking to me in this whole mess is why haven’t these Metabase customers acknowledge it publicly? …

Get the next one first.

Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.